Security Incidents mailing list archives

port 119

From: globi () GRAFF COM PL (Dariusz Zmokly)
Date: Mon, 3 Jan 2000 12:32:39 +0100


hi !

I wonder what does it mean when someone wants to connect to my machine on
port 119. Is there any software that could do it or is it a scan ?

Jan  2 01:27:41 rh-master portsentry[444]: attackalert: SYN/Normal scan from host: jammed.com/165.227.120.19 to TCP 
port: 119
Jan  3 09:22:52 rh-master portsentry[444]: attackalert: SYN/Normal scan from host: twhou-220-35.ev1.net/207.218.220.35 
to TCP port: 119

best regards :)
Dariusz Zmokly

Current thread:

Re: ICMP time exceed in-transit packets White, Tim (Dec 31)
- Re: ICMP time exceed in-transit packets Chris Brenton (Jan 01)
  - Re: ICMP time exceed in-transit packets Alain Thivillon (Jan 01)
    - Re: ICMP time exceed in-transit packets Christopher Wilson (Jan 02)
    - port 119 Dariusz Zmokly (Jan 03)
    - Re: port 119 Robert Graham (Jan 03)
    - Re: port 119 Thomas Molina (Jan 04)
    - Re: port 119 Vince Vielhaber (Jan 05)
    - Ports 25092 / 20869 Vanja Hrustic (Jan 04)
    - Re: Ports 25092 / 20869 Robert Graham (Jan 04)
    - port 1150 and 4833 ? Kim R. Rasmussen (Jan 04)
    - Re: port 1150 and 4833 ? Frameloss, Frameloss (Jan 10)
    - Re: port 119 R a v e N (Jan 05)
    - Re: port 119 Scott Laws (Jan 04)
    - Writeup: it. TLD going astray Arrigo Triulzi (Jan 03)

(Thread continues...)